Privacy Policy

This policy explains how personal data is handled on lukasthies.com, in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), and Law 34/2002 (LSSI-CE).

1. Controller

Lukas Thies, Calle Manuel Fernández Caballero 44, 11406 Jerez de la Frontera, Cádiz, Spain. Email: kontakt@lukasthies.com. Full details in the Legal Notice.

2. Server log files

The hosting provider automatically collects and stores information that your browser transmits: browser type and version, operating system, referrer URL, hostname, time of request, and IP address. This data is not merged with other data sources.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in the technically error-free presentation and security of this website. Retention: deleted by the hosting provider within a maximum of 30 days. Hosting provider: netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, acting as processor under Art. 28 GDPR. Servers are located within the EU.

3. Contact by email

If you contact me by email, the data you provide (name, email address, message content) is stored in order to process your enquiry and for any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures; otherwise Art. 6(1)(f) GDPR — legitimate interest in responding to enquiries. Retention: until the enquiry is fully resolved, unless statutory retention periods under Spanish commercial and tax law apply.

4. Appointment booking via Calendly

Scheduling for strategy calls is handled by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. If you book an appointment, the data you enter (name, email address, and your answers to the booking questions) is processed by Calendly on my behalf. Calendly may also set cookies and process your IP address.

Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures at your request. Transfer to a third country: data may be transferred to the USA. Calendly is certified under the EU-U.S. Data Privacy Framework; transfers are additionally safeguarded by Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. Calendly’s own privacy policy: calendly.com/privacy.

5. Cookies

This website uses technically necessary cookies required for basic operation (for example session handling by WordPress). These are set on the basis of Art. 6(1)(f) GDPR and Art. 22(2) LSSI, which exempt strictly necessary cookies from the consent requirement. Cookies that are not strictly necessary are only set with your prior consent, which you may withdraw at any time.

You can configure your browser to refuse cookies or to notify you before one is set. Disabling cookies may limit the functionality of this website.

6. Comments

If you leave a comment on an article, the comment text, your chosen name, your email address, and your IP address are stored. The IP address is retained to allow a response to legal claims arising from unlawful content.

Legal basis: Art. 6(1)(a) GDPR — consent, given by submitting the comment. Retention: until the comment is deleted.

7. Your rights

You have the right to obtain information about the personal data stored about you and its origin, recipients, and purpose of processing (Art. 15 GDPR), as well as the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). Where processing is based on legitimate interest, you have the right to object at any time (Art. 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise any of these rights, write to kontakt@lukasthies.com.

You also have the right to lodge a complaint with a supervisory authority. In Spain this is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, aepd.es. Visitors from Germany may alternatively contact the supervisory authority of their federal state.

8. No commercial email without consent

Commercial communications are only sent to recipients who have expressly requested or authorised them, in accordance with Art. 21 LSSI and § 7 UWG. No marketing email is sent to addresses collected from this website or from third-party sources without prior consent.

9. Changes to this policy

This policy is updated when changes to the services offered or to legal requirements make it necessary. Last updated: September 2026.